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’ SUBJECT : IHSA Support of the Agency Duties 


Under the Paperwork Reduction Act 


REFERENCES: = A. OGC Memo to IHSA, et. al., dtd 
17 August 1981; Subject: Paper- 
work Reduction Act of 1980 


B. IHSA Memo to OGC; dtd 22 April 
1981; Subject: Comments Regarding 
‘Analysis of the Paperwork Reduction 
Act of 1980 


1. Pursuant to reference A, some modification of the 
comments in reference B concerning regulations, policies, 
and procedures of the IHSA, which meet the Agency duties 
assigned under the Paperwork Reduction Act of 1980, is in 
order. 


2. On 24 July 1981 an EXCOM was held, dealing principally 
with the duties and responsibilities of the IHSA. The product 
of this review was: the approval of a mission and functions 
charter of the IHSA; the specification of the development of 
a.strategic plan for the Agency in one year, in accordance 

with the recommended process; and the approval and imposition 
of a milestone oversight management program for IHSs. A copy 
of the EXCOM memorandum recording these results is attached. 
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29 July 1982 


- MEMORANDUM FOR: Executive Committee Members 


FROM : Robert M. Gates 
Director, DCI/DDCI Executive Staff 


SUBJECT > Minutes of the Executive Committee Meeting, 24 July 1981 


l. the CIA Information Handling System Architect 
(IHSA) briefed the Executive Committee members on 24 July 1981 on the 
progress and status of the IHSA. -The meeting was chaired: by - ; 
Admiral Inman; others present were James Taylor 
(ADDS&T); Harry Fitzwater (DDA); Maurice Lipton (Comptroller): _ 

Evan Hineman (DD/NFAC); Robert Gates Sala William Donnelly 


(C/IMS/DDO), and[—s—=—sSCS (PSP). 


2. eviewed the progress that IHSA has made in 
reviewing and coordinating Agency information handling system 


development and the development of an Agency information handling 
architect and cited the need for an agreed statement of IHSA 
authorities. He described the positioning of his office in the 
DDA as appropriate and beneficial. r | 


3. Mr. Taylor asked which information handling systems are 
to be included in the Agency's architecture. Admiral Inman stated 
Phat {vould not 
be a part of the Agency's architecture but that CIA~managed information 
handling activities —- such as one in NPIC ~~ would be. Mr. Taylor 
Said that he would like to see this defined in further detail. 


4. [observed that user needs are insufficiently 
emphasized in the IHSA's proposed charter and procedures and that 
they do not specify whether and how such needs should drive the 
information handling process. Mr. Hineman said that determination 
of information handling systems requirements should be the 
responsibility of line managers and that the degree of IHSA tasking 
of line components called for in the proposed procedures 
is undesirable. He also stated that the IHSA's mission and functions 
Should contain greater emphasis on long-range planning. Noting 
that the process leading to establishment of the IHSA function 
had begun in April 1979, Mr. Lipton commented that progress toward 
implementation of the function has been slow. Mr. Fitzwater noted 
that progress has been impeded by lack of agreement on IHSA authorities 
and by staffing problems. EXCOM members agreed to provide more 
people to increase the pace of IHSA activities. [_ - 
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5. Ad@airal Inman Cecided: 


a. Yo keep IHSA in the DDA, for the tine being. The 
question of LHSA positioning will be re~az dressed 
in six pnonths- 


b. To revise paragraphs 3 and 8 of IHSA's mission 
and fuactions statement, changing IHSA's role 
in Agency information systems handling architecture 
to coordination on Ageacy systems and to recommend 
ations on systems design. ‘The revised statement 
is at Attachment l- 


c. To approve the proposed IHSA procedures for development . 
of an Agency IHS strategic plan (Appendix B of 
EXCOM 81-9032) and to require that the initial plan 
be prepared in one year rather than teo- The THSA 
was asked to determine and advise what personnel 
are required te meet this deadline- The Deputy 
Directors had previously agreed to make manpower 
available to accelerate the schedule- 


a- To approve the "Policy and Procedures for Management 
for Information Systems" (Attachment 2}- This 
revised paragraphs 3, 5, 5b, and 5£ of Appendix C 


of EXCOM &1-9032. 


e- To set aside the proposed Headquarters Regulation on 
LHSA (Appendix D of EXCOM 81-9032), its function 
being served by the IHSA Mission and Functions statement 
at Attachment 1. 


niral Inman complimented the work accomplished thus far by 
£firmed his support for the role of the Architect- [| 
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Performs Agency level planning for Int ormetion Service 
ticular emphasis on appt reeeren of technology. 
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-]. Publishes Strategic goals and objectives for purpose of 
-. program guidance. — ms 3 a: a a8 
=. Monitors progress toward wens ane objectives and reports 
State of Information Hanéling to EXCOM fincerporates ADP - . 
review). 
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APPENDIX C 


Policy and Procedures for Management for Information Systems 


A. PURPOSE 


This document is to set forth Agency policy regarding 
management responsibilities for the acquisition of new or 
enhanced Information System capabilities. ; 


B. ‘APPLICABILITY AND SCOPE ~~ Be 


'The provisions of this document apply to automated or other 
Clearly identifiable processes used for creation, movement, 
use, Storage, retrieval, or dissemination of intelligence and 
Management infermation. Included are ADP hardware and. 
software systems, communications sytems, terminals, 
word-processing, printers and copiers, image processing -and 
display systems. : . 


“eo POLICY” Be, (Peo MERE J eng ie Se Benes TT be ges Eo ae SERRE CAT cepacia in eames et 


i. General. 


Information System acquisitions shall be reviewed and 204 


approved at decision milestones by appropriate management 


levels. Systems of extraordinary cost, risk, or interest _ 


shall be reviewed by the EXCOM; the Information Handling 
Systems Architect (IHSA) and the Program Management. 
¢ Component shall support the EXCOM review process. 
; Information Systems falling be low the EXCOM review 


i.” threshold, but nevertheless important in the context of 


Agency Information ‘Systems Architecture and Planning, may, 
ba “reviewed by the THSA at decision milestones. 


s of management and coordination there are 


or purpose 
three classes of information systems, determined by | 
investment cost thresholds. Class I an@ Il systems shall 


comply with the procedures, Standards, and documentsatien 
requirements for major programs. Cless III programs 
Shall comply with the procedures, standards and 
decumentation requirements for minor programs. 
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a) Class I Informations Systems shall -be reviewed and 


ee ee 


approved at decision milestones by the EXCOM. Any 
Information System, or any significant revision of an 
existing Information System, meeting any one of the 
following criteria. shall be designated a Class I 
Information System: ; 


i) Has anticipated acquisition costs in excess of 
‘$8 million during the span from program 
initiation to the time the system becomes 
operational; or : See 


ji) Has estimated costs in excess of $2 million:in 
any year; OK 


iii} Is designated as being of special interest or 
considered to have Agency-wide or community 
importance. Nominations to the EXCOM can be 

~ ymade by any of the. EXCOM principals or the IHSA. 

Class II Information Systems shall be reviewed and 

approved at decision milestones by the Deputy 


pirector-responsibte forthe system:~~Any “Information ™ 


System, or any significant revision of an existing 
Information System, meeting any of the following 


criteria shall be designated a Class IL Information - 


“Sey Stents ts, 28 og Se sees iat aa Matte 2 


i) Has anticipated acquisition costs in excess of 
$1 million during the year from program 
initiation to the time the system becomes 
operational; or “32 


ji) Has estimated acquisition costs in.excess of 


“$250,000 in any year; or 


/iii) Is designated as being of special interest_ 


c): 


Class III Information Systems shall be reviewed and 
approved as the responsible Deputy Director may - 
direct. In general, it is anticipated that he will | 
delegate that authority to the next lower level of © 
management. Any information system, or any 
significant revision of an information system which 
is in cost or importance less than Class II is a4. 
Class III system. 
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3. Milestone Decisions 


Three milestone decisions are defined-for acquisition of 
‘Major Information Systems. a 
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o Milestone 0 Decision -~— Approval of Mission Need - 
Statement approval of the budget and schedule, 
-and authorization to proceed to the next program 


phase. The Mission Need Statement shall define 
the need for the system, and shall be 
accompanied by Preliminary System Requirenents, 
acguisition strategy, schedule goals, and the 
total and annual investment of resources 
estimated. The next program phase for a simple 
package: (no program development investment, 
e.g-, a computer with standard support software) 
is the actual procurement, OF for a complex 
system development, the next phase is the 
Concept Development Phase. e- 


Milestone 1 Decision —— Approval of the System 
Design.Concept, System Requirements, and Pregram 
Development Plan; and authorization to proceed 


with the next~ program: phase... -For large complex... 


systems, alternate concepts are to be explored — 
and evaluated before settling on a chosen 
concept, the reasons for a particular selection 
are to be presented: Documentation at this 
stage shall include baseline System 7 e*, 
Requirements, System Design Concept, and 3. 
Program Development Plan. System reguirernents 
will be coordinated and presented by the isa. 
Cost and schedule goals are reassessed. 
Equipment acquisition plans are presented for 
approval. Acquisition of proguction stétus, 
commercial hardware will normally be execsted 


‘pursuant to this approval or Girection~. 


Approved programs then proceed to the 
preliminary Design Phase. 


estone 2 Decision —— Approval. of the. 
Preliminary Design and Revised Program 
Development. All acquisition programs, however 
phased, will have a single Preliminary Design 
Review (PDR) covering the entire progran. This 
review is coordinated with the program's ‘ 
internal PDR so that issues arising as a result 
of the PDR process can be evaluated. At this 
milestone review the program cost, 
functionality, and schedule objectives, as 
defined and determined at the PDR, are 
reassessed. Approved programs then proceed to 
fuli-scale development. ; 
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Prior to the review, the IHSA will prepare brief point 
papers covering any points of concern or disagreement 
relative to the information system's Gevelvpment~. 
ACproximately one week prior to the EXCOM Milestone review 
of Class I systems, the IHSA will prebrief the EXCOM 
concerning unresolved issves and concerns. The project 
management will then brief the EXCOM on the system at the 
Milestone review. The IHSA will then prepare a decision 
coordinating paper documenting the EXCOM guidance ane 


For Class II systems, if the IHSA feels that there are 


-' significant architectural concerns, he may Join the 
Milestone review. 


5... IHSA Responsibilities 


The Information Handling Systems review process 
compliments the budgeting process. Inf ormation Sys tem 
Gecisions must fit into the affordability framework of 
the budget, and further, must fit into the Agency 


Systems. In that context, the IHSA wilds 


a) Formulate overall architecture tenets for 


Information Systems e saiialisee, weep of st tittbeter le etbee 


b) In conjunction with prospective users, conduct 
formal reviews of proposed Information Systems 


to: 


o Determine a with architecture 
tenets 


o Validate Functional Requirements 


o Validate System Concept 


CS_ * 
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o Ensure that relevant interfaces are 
considered 


re) vadiaae information security of BeeoeS ss 
design 


-c¢) Advising on relative priorities of Information 
Systems 


a) Focusing the issues for EXCOM reviews i 


e) Making an annual report to the EXCOM on the 
status of IHSs in the Agency and advising EXCOM 
on Information pouching Systems decisions 


£) Designated inaaaust for the Agency, to 

assure that architecture is either in 
compliance with government-wide standards 
and procedures or that variations have i 
senior management approval. Included is an 

assuring Agency compliance with Federal 

swig neta a Information Processing Standards ,~ ands sss. 

granting waivers to these in accordance 
with delegated authorities and specified 
procedures. 


i * C6 
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At each decision milestone, juidance and direction to 


the program are documented. - > ee ore 
; 7 ~ 


At any point at which a major program deviation in cost 
Ox schedule goals of more than 10 percent is estimated, 
the IHSA will: be notified. 


- Procedures 
The IHSA will receive all documentation relevant to 
SyStems development for Class ZI and Il systems. Included 
are such documents as: 


o Functional er ee ; we 
‘o Program acquisition plan | . 
©. Peasibility, analyses and tradeoff studies 
o System specification 
Oo Management Hi sh. 
"6 “SySteiv"functional-specitications -2:iec—— nee Sain 
° Inter£ace-control specifications 
-o System detailed Rect Sees ease, : eee Le 
o System test and validation plan 
Oo Periodic progress reports 
At least six months prior to Milestone 1 or 2 review of 
Class I and It Systems the program sponsor will notify the 
LHSA. For Class I Systems, the IHSA will coordinate and 


Schedule an Excgo- review. 


THSA will appoint a member of his stafé to coordinate 


The 

with the program office concerning preparation for ths : 
Milestone review. The program office will brief the zuHsa Ye 
office with respect to the program status for Class ¥ end If 
Systems. Questions. which the office ox the IHSA has with the. 
project will be addressed to the project managemant. The 2 
intent is to vesolve all the questions that pertain te such | 
matters as the project formulation, completeness of Planning 
and design, interoperability, conformity with Standards, and 
supportability prior to the Milestone review. 
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Prior to the review, the IHSA will prepare brief point 
papers covering any points of concern or disagreement 
relative to the information system's develvpment-~ 
Approximately one week prior to the EXCOM Milestone review 


of Class I systems, the IHSA will prebrief the EXACOM 


concerning unresolved issves and concerns- The project 
management will then brief the EXCOM on the system at the 
Milestone review. The IHSA will then prepare a decision 
coordinating paper documenting the EXCCM guidance and 

e 


For Class II systems, if the IHSA feels thet there are 


-' significant architectural concerns, he may join the 
‘Milestone review. 


5. IHSA Responsibilities 


The Information Handling Systems review process 

compliments the budgeting process- Information System 
decisions must fit into the affordability framework of 
the budget, and further, must fit into the Agency ° 


pete: architecture ana ‘planning framework..for Tntormalion 20. nu sss oe 


Systems. In that context, the IHSA cee a ee 


a) Formulate overall architecture tenets for 
Information Systems i ree EE eR ESSE. Th Sia Sea eal oe Siete 


ry 


b) In conjunction with prospective users, conduct 
formal reviews of proposed Information Systems 
to: : me Pe OF 
o Determine compliance with erchitecture 
tenets 4 : 


o Validate Functional Requirements 


o Validate System Concept 


cS | : 


Release 2003/08/13 : CIA-RDP84B00890R000300010008-8 
S - INTERNAL USE ONLY - 


. Approved For 
PPP DMIN E 


noproved For RV PR on ERE een 


~ 


Approved For er 2003/08/13 : CUSRD eODe soggy s0o0 10008 & 


o Ensure that relevant interfaces are 
considered 


Oo Validate information security of proposed 
_ design : 
-¢) Advising on relative priorities of Information 
ay ones 


d) Focusing the issues for EXCOM pevecre 


e) Making an annual ‘eesere to the EXCOM on the 
status of IHSs in the Agency and advising EXCOM 
on Information Bante Systems decisions 


£) Designated Sasol for the Agency, to 
assure that architecture is either in 
compliance with government-wide standards 
and procedures or that variations have . 
senior management approval. Included is —_ 
assuring Agency compliance with Federal 


granting waivers to these in accordance 
with delegated authorities and specified 
procedures. 
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teen information Processing Standards ;~and ssi 
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